9bcf516ff4bfd3534828845f4e86044ff5fa9c5f39be1b02213c1aff4767da19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9bcf516ff4bfd3534828845f4e86044ff5fa9c5f39be1b02213c1aff4767da19
Size

816KB
MD5

ffd1960abf1b4fb2280ff3dd502f7aed
SHA1

e192b1112142ad853c8c9e5f5110c714c45c75b4
SHA256

9bcf516ff4bfd3534828845f4e86044ff5fa9c5f39be1b02213c1aff4767da19
SHA512

c864c05fcbb37ea64432bfad537e86db4d61b35400f556370c632e8430d89f3499ac09dc715986a585d548f889ef1215cee1cbda4a3a212b646c48269fe45416
SSDEEP

24576:B7Rj/5mdd8XhVnh0GOFCan4L4QsQVuGOrV:BdMzAhVnmCan05sQYGoV

Score

N/A

Malware Config

Signatures

Files

9bcf516ff4bfd3534828845f4e86044ff5fa9c5f39be1b02213c1aff4767da19
.exe windows x86

835c724243f1d2f2aed02685d8c90f09

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Beep
DeleteFileW
Beep
Beep
lstrlenW
FormatMessageA
Beep
VirtualQuery
GetModuleHandleA
WriteConsoleW
TlsSetValue
TlsGetValue
GetCurrentThreadId
Beep
ReleaseMutex
GetModuleFileNameW
SetLocaleInfoA
VirtualProtect
Beep
GetPrivateProfileIntA
Beep
SetCurrentDirectoryW
Beep
lstrcatA
Beep
SetThreadPriority
Beep
GetCommandLineA
GetFullPathNameW

catsrvut

StartMTSTOCOM
CGMIsAdministrator
RegDBRestore
RegDBBackup

Sections

.TEXT
Size: 15KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ndata
Size: 1024B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.vdata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ